$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json) Hash identifier: Z6/+Wjh57S5EzRL+x3yW74GfQ1Vng5lHKlx2In/J7/c= Subject key identifier: CD:AE:D1:A5:10:17:EC:91:43:88:4F:37:16:A7:90:33:9E:8D:CE:37 Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Certificate serial: 051B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft Manifest number: 0511 Signing time: Sun 02 Nov 2025 23:43:42 +0000 Manifest this update: Sun 02 Nov 2025 23:43:42 +0000 Manifest next update: Sun 09 Nov 2025 23:43:42 +0000 Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: DLSKGgpyp1yRDeXcHvHmnHnu6EK0iOHkOcgjicLIUT8=) 2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: mvzxmb3Ec77hzB5jBWCPOpL7XoHBd1oX7QkZWEGZOZU=) 3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: HOR2Uf7sxy7+iosGT3XdbxMdqbYBTIug6HOwedpjmIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1307 (0x51b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Validity Not Before: Nov 2 23:43:42 2025 GMT Not After : Nov 9 23:43:42 2025 GMT Subject: CN=6907ecae-2237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:40:70:d6:a1:dc:b9:8c:2d:93:64:b7:c5: 9b:1e:58:fd:25:81:22:ca:e6:aa:2e:e6:c5:30:c5: 35:29:b2:53:91:0f:bc:29:eb:1e:05:80:18:9e:ab: 8e:2f:70:b3:dd:f2:ae:25:57:fd:80:05:94:0b:16: 87:15:8f:e9:dc:f0:cb:d7:14:27:d3:53:d5:e1:d5: e6:33:50:72:90:1a:8d:7f:7f:0c:b2:53:21:35:54: 7d:86:09:d3:1a:d6:c7:65:78:ef:b8:7e:36:d3:10: f8:23:c1:c6:79:32:81:25:87:60:a6:c8:c9:35:b9: 78:4c:c9:1e:ed:9c:04:93:0b:fb:da:21:a5:89:6f: 48:d2:06:da:ef:e9:e5:ab:0a:b4:9c:d3:fc:06:e5: 72:52:1e:ec:80:9f:0a:c7:b6:2c:32:dc:3c:87:02: 16:a8:dd:93:76:07:e8:30:51:04:0b:f6:df:04:78: 2b:03:1f:a3:fb:8b:8e:1a:95:ca:11:a8:30:39:8a: 79:72:ee:ef:92:ad:c1:23:48:9d:04:11:93:ea:51: 68:23:ec:48:b1:d1:21:24:14:28:56:9b:24:63:0e: 6b:90:e8:4b:7e:b7:8e:ec:e5:24:c8:5a:2d:1b:15: 06:19:c0:4a:bc:b8:3d:32:c8:b3:ed:55:09:de:4f: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AE:D1:A5:10:17:EC:91:43:88:4F:37:16:A7:90:33:9E:8D:CE:37 X509v3 Authority Key Identifier: keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8c:aa:5f:09:3e:33:fb:db:28:d7:6b:00:f4:2d:4e:ba:82: 50:e2:cc:6c:87:1a:2a:db:35:2f:ae:f2:bc:28:75:18:95:d1: 41:c0:04:d3:4a:92:4f:bf:fd:68:74:f0:c1:44:3c:6c:5a:b9: fb:29:6a:77:4e:cc:5e:93:99:30:da:a8:45:93:54:26:1d:bd: 1b:92:f0:1f:f7:cb:b5:3c:86:c1:d3:5f:73:d8:af:fe:5f:ee: 42:78:0e:e1:00:8c:f8:e5:da:15:b6:44:87:57:55:6c:87:4f: 29:30:49:c0:5b:0c:e9:3a:73:eb:ec:58:fe:41:e6:2f:05:b3: 82:4d:14:6d:ec:87:1b:da:ab:76:ba:c6:60:0c:35:2c:48:ab: dc:2b:14:c8:87:a8:f8:dc:bf:f4:1c:29:f6:df:68:17:78:b2: 62:7b:8e:1a:8c:26:d7:20:d3:ca:74:58:65:48:35:00:44:55: 67:5b:57:b5:29:65:89:8d:65:9a:93:b5:e1:fc:49:13:b3:ca: e5:ed:63:19:3c:03:8e:a8:4a:a0:23:e6:b6:7e:55:1a:20:fb: 94:93:61:08:2d:d6:e8:bc:98:8c:a5:d5:03:1d:23:be:8b:a5: ef:f4:34:44:4d:a7:72:0e:65:ae:71:59:10:62:f9:63:0f:67: be:f5:0e:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5NjFEMDJGRjMw OUNFN0JEMjAwHhcNMjUxMTAyMjM0MzQyWhcNMjUxMTA5MjM0MzQyWjAYMRYwFAYD VQQDEw02OTA3ZWNhZS0yMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraVAcNah3LmMLZNkt8WbHlj9JYEiyuaqLubFMMU1KbJTkQ+8KeseBYAYnquO L3Cz3fKuJVf9gAWUCxaHFY/p3PDL1xQn01PV4dXmM1BykBqNf38MslMhNVR9hgnT GtbHZXjvuH420xD4I8HGeTKBJYdgpsjJNbl4TMke7ZwEkwv72iGliW9I0gba7+nl qwq0nNP8BuVyUh7sgJ8Kx7YsMtw8hwIWqN2TdgfoMFEEC/bfBHgrAx+j+4uOGpXK EagwOYp5cu7vkq3BI0idBBGT6lFoI+xIsdEhJBQoVpskYw5rkOhLfreO7OUkyFot GxUGGcBKvLg9Msiz7VUJ3k9CNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2u0aUQ F+yRQ4hPNxankDOejc43MB8GA1UdIwQYMBaAFCbIfRlm4vg198yOlh0C/zCc570g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQxMi9CNjc2RUJFMDI4 QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1EWDN6STZXSFFMX01Kem52 U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzaDlHV2JpLURYM3pJNldIUUxfTUp6bnZTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1E WDN6STZXSFFMX01Kem52U0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKjKpfCT4z+9so12sA9C1OuoJQ4sxshxoq2zUvrvK8KHUYldFBwATT SpJPv/1odPDBRDxsWrn7KWp3Tsxek5kw2qhFk1QmHb0bkvAf98u1PIbB019z2K/+ X+5CeA7hAIz45doVtkSHV1Vsh08pMEnAWwzpOnPr7Fj+QeYvBbOCTRRt7Icb2qt2 usZgDDUsSKvcKxTIh6j43L/0HCn232gXeLJie44ajCbXINPKdFhlSDUARFVnW1e1 KWWJjWWak7Xh/EkTs8rl7WMZPAOOqEqgI+a2flUaIPuUk2EILdbovJiMpdUDHSO+ i6Xv9DRETadyDmWucVkQYvljD2e+9Q6k -----END CERTIFICATE-----Generated at Tue Nov 4 08:10:37 2025 by rpki-client